That's EXACTLY why I maintain that AI should NEVER be given agency. Don't allow it to commit code, don't allow it to interact with anyone but the user. For God's sake, don't put it in a robot.
It did hack the Gym's registration system. Perhaps not the deepest or most impressive hack, but it did circumvent the business rules in place. Surely you don't claim that letting random people on the web bounce people off of a waiting list was the intended functioning of the Gym's registration system!?!?
I maintain that the article was NOT overhyped or clickbait. I say that because apparently most people don't realize that an AI agent might randomly decide to break the law as a shortcut when you tell it to do something. They probably think nobody would be incredibly stupid enough to unleash that on an unsuspecting public (they're wrong, of course).
Remember in the X-Files when Mulder spent 24 hours trying and failing to draft an airtight wish for the genie, then ultimately decided it just wasn't feasible? That's apparently required to use an AI with agency safely. Sounds like a bad idea.